[paste-web/oscp] Land the IPA CA as a trusted CA for ldaps to work as expected

[Andrea Veri <averi src gnome org>]

commit 7877316681bcab6a01bb2fec9a1b2031ca15beca
Author: Andrea Veri <averi redhat com>
Date:   Tue Oct 23 17:29:27 2018 +0200

    Land the IPA CA as a trusted CA for ldaps to work as expected

 Dockerfile |  3 +++
 ipa-ca.crt | 21 +++++++++++++++++++++
 2 files changed, 24 insertions(+)
---
diff --git a/Dockerfile b/Dockerfile
index c8f52ec..c61e0b9 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -15,6 +15,9 @@ COPY paste.gnome.org.conf /etc/httpd/conf.d
 RUN echo 'ServerName paste.gnome.org' >> /etc/httpd/conf/httpd.conf
 RUN echo 'ErrorDocument 500 https://static.gnome.org/error-500/500.html' >> /etc/httpd/conf/httpd.conf
 
+COPY ipa-ca.crt /etc/pki/ca-trust/source/anchors
+RUN update-ca-trust
+
 WORKDIR ${PASTE_HOME}
 
 RUN mkdir -p ./public/assets/deneb && \
diff --git a/ipa-ca.crt b/ipa-ca.crt
new file mode 100644
index 0000000..9f14f84
--- /dev/null
+++ b/ipa-ca.crt
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----